In reply to a post by caffn8me:

TOTP 2FA implementations must be timezone neutral. From RFC 6238;

In reference to tools.ietf.org/html/rfc6238:

R1: The prover (e.g., token, soft token) and verifier (authentication
or validation server) MUST know or be able to derive the current
Unix time (i.e., the number of seconds elapsed since midnight UTC
of January 1, 1970) for OTP generation.

The fact a server is in the USA and the user trying to authenticate is in a different timezone is irrelevant.

I should state that my favourite RFC is obviously RFC 2324 with RFC 7168 a close second

That's probably why my code doesn't do any time zone stuff, been a while since I have looked at it.

As for the RFC Docs, I can see why, RFC 2324 has matured more than RFC 7168 .

Paul

Many thanks for all ideas I received.I tried many times to contact amazon but no reply.I then turned to my Great Niece who resolved the problem in a flash.

It might be useful for someone else in the future if you tell us what the solution was .

Everyone reading this thread would remember.

And don't worry if it is simple and obvious. The "next person" could be doing exactly the same.

Edited by RobertoS (Sat 08-Jul-17 12:42:13)

In reply to a post by RobertoS:

It might be useful for someone else in the future if you tell us what the solution was .

Everyone reading this thread would remember.

And don't worry if it is simple and obvious. The "next person" could be doing exactly the same.

It could probably be down to Amazon emailing a code and it being greylisted and then requested another x mins later and then receiving the first code which would be invalid.

Or it might be the authenticator app and the OP being too slow to enter the code in and it changed to a new code while the OP was entering the code that they saw which would now be invalid.

If the second one was the case, its always best to wait for the code to change and then enter in the new code, you have about 30 seconds to enter that in.

But without the OP telling us the solution they took we are all just guessing here.

Paul